Skulle man kunna få lite säkerhetsreflektioner på följande kod?
Mina ASP-kunskaper är inte mycket att hänga i julgranen precis...
<!--#include file="huvud.asp"-->
<%
dim objConn
Set objConn = Server.CreateObject("ADODB.Connection")
objConn.Open "inrikes","info14crew", "ragnardahlberg"
set data = server.createobject("ADODB.Recordset")
'data.activeconnection = strDB
strSQL = "SELECT * FROM admin WHERE id = 1"
data.open strSQL, objConn
num_items = data("items_per")
display = data("display")
include_page = data("included_page")
multi = data("multi")
show_email = data("show_email")
if data("linked_page") = "none" then
linked_page = include_page
else
linked_page = data("nyheter.asp")
end if
data.close
%>
<TD rowSpan=2 vAlign=top>
<TABLE cellPadding=0 cellSpacing=0 height="100%" width=226>
<TBODY>
<TR>
<TD valign="top"><img border="0" src="info-14-filer/inrikes.gif" width="226" height="19">
<%
if show = "" then
set data = server.createobject("ADODB.RecordSet")
'data.activeconnection = strDB
strSQL = "SELECT id, news_title, news_date FROM news ORDER BY news_date DESC"
data.pagesize = 20
data.open strSQL, objConn
intCount = 0
while not data.eof and intCount < data.pagesize
intCount = intCount + 1
response.write "<font size='1' COLOR='3A67B3' face='Arial'>["
response.write data("news_date") & "] </font>"
response.write "<font size='1' face='Arial'><a href='" & "inrikes.asp" & "?id=" & data("id") & "'>" & data("news_title") & "</a><br>"
response.write "<font size='1' face='arial'>" & "</font>"
data.movenext
wend
data.close
end if
%><br>
<img border="0" src="info-14-filer/utrikes.gif" width="226" height="19">
<%
objConn.Close
Set objConn = nothing
Set objConn = Server.CreateObject("ADODB.Connection")
objConn.Open "utrikes","info14crew", "ragnardahlberg"
if show = "" then
set data = server.createobject("ADODB.RecordSet")
'data.activeconnection = strDB2
strSQL = "SELECT id, news_title, news_date FROM news ORDER BY news_date DESC"
data.pagesize = 20
data.open strSQL, objConn
intCount = 0
while not data.eof and intCount < data.pagesize
intCount = intCount + 1
response.write "<font size='1' COLOR='3A67B3' face='Arial Narrow'>["
response.write data("news_date") & "] </font>"
response.write "<font size='1' face='arial'><a href='" & "utrikes.asp" & "?id=" & data("id") & "'>" & data("news_title") & "</a><br>"
response.write "<font size='1' face='arial'>" & "</font>"
data.movenext
wend
data.close
end if
Set data = nothing
objConn.close
Set objConn = nothing
%>
<p>
<!-- #include file="-reklam.asp" -->
</TD></TR></TBODY></TABLE></TD>
<TD background=info-14-filer/info14_r5_c4.gif rowSpan=2 vAlign=top
width=14><TABLE background=info-14-filer/info14_r5_c4.gif height="100%"
width="100%">
<TBODY>
<TR>
<TD></TD></TR></TBODY></TABLE></TD>
<TD rowSpan=2 vAlign=top>
<TABLE cellPadding=0 cellSpacing=0 height="100%" width=346>
<TBODY>
<TR>
<TD valign="top">
<a href="http://www.salemfonden.info" target="_blank"><img border="0" src="salem2002.jpg" ></a><br><br>
<img border="0" src="info-14-filer/lopsedeln.gif" width="346" height="19">
<br><!--#include file="lopsedeln.asp"-->
<img src="info-14-filer/2ar.gif" border="0"><br><font size="1" face="arial">
Nu i dagarna firar info14.com 2 år på nätet. Som en del av det har sidan bytt till en helt ny
layout vars design vi hoppas ni uppskattar. Vi har försökt göra sidan så lättöverskådlig och lätt
hanterlig som möjligt, samt att den fått ett nytt och fräschare utseende...
<a href="2ar.asp">[Läs mer]</a></font><br>
<br><br>
<img border="0" src="info-14-filer/artiklar.gif" width="346" height="22"><br>
<!--#include file="aldreartiklar.asp"-->
</TD></TR></TBODY></TABLE></TD>
<TD background=info-14-filer/info14_r5_c6.gif colSpan=2 vAlign=top
width=15><TABLE background=info-14-filer/info14_r5_c6.gif cellPadding=0
cellSpacing=0 height="100%" width="100%">
<TBODY>
<TR>
<TD></TD></TR></TBODY></TABLE>
<!--#include file="botten.asp"-->